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Abstract. The behaviour produced by an instruction sequence under 
execution is a behaviour to be controlled by some execution environment: 
each step performed actuates the processing of an instruction by the exe- 
cution environment and a reply returned at completion of the processing 
determines how the behaviour proceeds. The increasingly occurring case 
where the processing takes place remotely involves the generation of a 
stream of instructions to be processed and a remote execution unit that 
handles the processing of this stream of instructions. We use process alge- 
bra to describe the behaviours produced by instruction sequences under 
execution and to describe two protocols implementing these behaviours 
in the case of remote processing. We also show that all finite-state be- 
haviours considered in process algebra can be produced by instruction 
sequences under execution. 
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1 Introduction 

The behaviour produced by an instruction sequence under execution is a be- 
haviour to be controlled by some execution environment. It proceeds by perform- 
ing steps in a sequential fashion. Each step performed actuates the processing of 
an instruction by the execution environment. A reply returned by the execution 
environment at completion of the processing of the instruction determines how 
the behaviour proceeds. Increasingly, the processing of instructions takes place 
remotely. This means that, on execution of an instruction sequence, a stream 
of instructions to be processed arises at one place and the processing of that 
stream of instructions is handled at another place. The main objective of the 
current paper is to bring this phenomenon better into the picture. To achieve 
this objective, we describe two protocols for instruction stream processing that 
deal with this phenomenon. 

The phenomenon sketched above is found if it is impracticable to load the 
instruction sequence to be executed as a whole. For instance, the storage ca- 
pacity of the execution unit is too small or the execution unit is too far away. 



The phenomenon requires special attention because the transmission time of the 
messages involved in remote processing makes it hard to keep the execution unit 
busy without intermission. The more complex protocol for instruction stream 
processing described in this paper is directed towards keeping the execution 
unit busy. There is no reason to use the word "remote" in a narrow sense. It 
is convenient to consider processing remote if it involves message passing with 
transmission times that are not negligible. In that case, the more complex proto- 
col provides a starting-point for studies of basic techniques aimed at increasing 
processor performance, such as pre-fetching and branch-prediction, at a more 
abstract level than usual. Therefore, we consider the more complex protocol 
relevant to the area of computer architectures. 

The descriptions of the protocols for instruction stream processing start from 
the behaviours produced by instruction sequences under execution. By that we 
abstract from the instruction sequences which produce these behaviours. At 
the level of abstraction concerned, it is easy to describe how the instruction 
streams are generated. How instruction streams can be generated efficiently from 
instruction sequences is another matter. 

The work presented in this paper is a spin-off of a line of research whose 
working hypothesis is that instruction sequence is a central notion of computer 
science. In this line of research, issues concerning the following subjects from the 
theory of computation have been investigated from the viewpoint that a program 
is an instruction sequence: semantics of programming languages, expressiveness 
of programming languages, computability, computational complexity, and per- 
formance related matters of programs. In the area of computer architectures, 
basic techniques aimed at increasing processor performance have been studied 
in this line of research as well, The main references to the work carried out in 
this line of research can for instance be found in 

In the work carried out in the line of research mentioned above, use is made 
of a special-purpose process algebra to describe and analyse the behaviours pro- 
duced by instruction sequences under execution. The process algebra in question 
is introduced in jS] under the name BPPA (Basic Polarized Process Algebra), 
but prompted by the development of thread algebra [6] , which is a design on top 
of it, BPPA has been renamed to BTA (Basic Thread Algebra). The behaviours 
considered in BTA are called threads. They model the behaviours produced by 
instruction sequences under execution directly: upon each action performed by 
a thread, a reply from an execution environment - which takes the action as an 
instruction to be processed - determines how the thread proceeds. In general- 
purpose process algebras, such as ACP gE], CCS [T5TT7] and CSP pITH] . it 
is rather awkward to describe and analyse behaviours of this kind. However, 
the behaviours considered in BTA can be viewed as processes that are definable 
over ACP. This allows for the protocols for instruction stream processing to 
be described using ACP or rather ACP T , an extension of ACP which supports 
abstraction from internal actions. 

Process algebras such as ACP, CCS and CSP are considered relevant to 
computer science, as is witnesses by the extent of the work on process algebras 
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in theoretical computer science. This means that there must be programmed 
systems whose behaviours are taken for processes as considered in such a process 
algebra. Another objective of the current paper is to establish results concerning 
the processes as considered in ACP that can be produced by programs under 
execution, starting from the perception of a program as an instruction sequence. 
The main result established is that, by apposite choice of basic instructions, all 
finite-state processes can be produced by instruction sequences provided that 
the cluster fair abstraction rule (see e.g. [13], Section 5.6) is valid. 

In the work carried out in the line of research mentioned above, use is made of 
an algebra of instruction sequences to describe and analyse instruction sequences. 
The algebra in question is introduced in [5] under the name PGA (ProGram Al- 
gebra). The instruction sequences considered in PGA are single-pass instruction 
sequences, i.e. a finite or infinite sequences of instructions of which each instruc- 
tion is executed at most once and can be dropped after it has been executed or 
jumped over. PGA does not provide a notation for programs that is intended 
for actual programming: programs written in an assembly language are finite 
instruction sequences for which single-pass execution is usually not possible. We 
show that all finite-state processes can as well be produced by programs written 
in a program notation which is close to existing assembly languages. 

Instruction sequences under execution, and more generally threads, may 
make use of services such as counters, stacks and Turing tapes. The use op- 
erators introduced in [6] are concerned with the effect of services on threads. An 
interesting aspect of making use of services is that instruction sequences under 
execution that make use of services may produce infinite-state processes. On that 
account, we add the use operators to BTA and make precise what processes are 
produced by instruction sequences under execution that make use of services. 

This paper is organized as follows. First, we give brief summaries of PGA 
and BTA (Sections [2] and [3j and define the threads produced by the instruc- 
tion sequences considered in PGA (Section 2J. Next, we introduce a kind of 
instructions/actions meant for interaction with services (Section [5]), give brief 
a summary of ACP r (Section [B]), and define the processes produced by the 
threads considered in BTA if the actions are of the kind meant for thread- 
service interaction (Section [7]) • Then, we describe two protocols for instruction 
stream processing (Sections [8] and [9J and discuss some conceivable adaptations 
of the more complex one ( Section H0|. After that, we introduce a kind of in- 
structions/actions meant for producing non-deterministic processes (Section [H} 
and show how they allow for all finite-state processes to be produced by instruc- 
tion sequences (Section [12]) • Following this, we extend BTA with operators for 
making use of services and define the processes produced by threads making use 
of services (Section [13J. We also introduce PGLD, a program notation close to 
existing assembly languages, and show that all finite-state processes can also be 
produced by PGLD programs (Section H4]). Finally, we make some concluding 
remarks (Section [Po]) . 

This paper consolidates material from |7|9|10j . 
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2 Program Algebra 



In this section, we review PGA (ProGram Algebra). The starting-point of pro- 
gram algebra is the perception of a program as a single-pass instruction sequence. 
The concepts underlying the primitives of program algebra are common in pro- 
gramming, but the particular form of the primitives is not common. The pre- 
dominant concern in the design of program algebra has been to achieve simple 
syntax and semantics, while maintaining the expressive power of arbitrary finite 
control. 

In PGA, it is assumed that a fixed but arbitrary set 21 of basic instructions 
has been given. The intuition is that the execution of a basic instruction may 
modify a state and produces a reply at its completion. The possible replies are 
the Boolean values T and F. 

PGA has the following primitive instructions: 

— for each a G 21, a plain basic instruction a; 

— for each a £ 21, a positive test instruction +a; 

— for each a £ 21, a negative test instruction —a; 

— for each I £ N, a forward jump instruction 

— a termination instruction !. 

We write 3 for the set of all primitive instructions of PGA. On execution of an 
instruction sequence, these primitive instructions have the following effects: 

— the effect of a positive test instruction +a is that basic instruction a is 
executed and execution proceeds with the next primitive instruction if T 
is produced and otherwise the next primitive instruction is skipped and 
execution proceeds with the primitive instruction following the skipped one 

— if there is no primitive instructions to proceed with, deadlock occurs; 

— the effect of a negative test instruction —a is the same as the effect of +a, 
but with the role of the value produced reversed; 

— the effect of a plain basic instruction a is the same as the effect of +a, 
but execution always proceeds as if T is produced; 

— the effect of a forward jump instruction #1 is that execution proceeds with 
the Z-th next instruction of the program concerned — if I equals or there 
is no primitive instructions to proceed with, deadlock occurs; 

— the effect of the termination instruction ! is that execution terminates. 

PGA has the following constants and operators: 

— for each u £ 3, an instruction constant u ; 

— the binary concatenation operator _ ; _ ; 

— the unary repetition operator _ w . 

We assume that there is a countably infinite set of variables which includes 
x, y, z. Terms are built as usual. We use infix notation for concatenation and 
postfix notation for repetition. 
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Table 1. Axioms of PGA 




= x ; (y ; x) PGA1 
PGA2 
PGA3 
x ; (y ; x) w PGA4 



x ;y = x 
{x ; y) u = 



A closed PGA term is considered to denote a non-empty, finite or eventually 
periodic infinite sequence of primitive instructions Closed PGA terms are con- 
sidered equal if they represent the same instruction sequence. The axioms for 
instruction sequence equivalence are given in Table [TJ In this table, n stands for 
an arbitrary positive natural number. The term x n is defined by induction on 
n as follows: x 1 = x and x n+1 = x ; x n . The unfolding equation x u = x ; x u is 
derivable. Each closed PGA term is derivably equal to a term in canonical form, 
i.e. a term of the form t or t ; t' u , where t and t' are closed PGA terms in which 
the repetition operator does not occur. 

The initial models of PGA are considered its standard models. Henceforth, 
we restrict ourselves to the initial model Xpga of PGA in which: 

— the domain is the set of all finite and eventually periodic infinite sequences 
over the set 3 of primitive instructions; 

— the operation associated with ; is concatenation; 

— the operation associated with u is the operation — defined as follows: 

• if F is a finite sequence over 3, then F— is the unique eventually periodic 
infinite sequence F' such that F concatenated n times with itself is a 
proper prefix of F' for each n 6 N; 

• if F is an eventually periodic infinite sequence over 3, then F— is F . 

The members of the domain of Xpga are called instruction sequences. 

Xpga is loosely called the initial model of PGA because all initial models of 
PGA are isomorphic. 

3 Thread Algebra 

In this section, we review BTA (Basic Thread Algebra) . BTA is a process algebra 
tailored to the description and analysis of the behaviours produced by instruction 
sequences under execution. These behaviours are called threads. 

In BTA, it is assumed that a fixed but arbitrary set A of basic actions, with 
tau £ A, has been given. Besides, tau is a special basic action. We write Aau for 
A U {tau}. A thread performs basic actions in a sequential fashion. Upon each 
basic action performed, a reply from an execution environment determines how 
it proceeds. The possible replies are the Boolean values T and F. Performing tau, 
which is considered performing an internal action, always leads to the reply T. 

1 An eventually periodic infinite sequence is an infinite sequence with only finitely 
many distinct suffixes. 
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Table 2. Axiom of BTA 



x <tau > y = x <tau > x Tl 



Although BTA is one-sorted, we make this sort explicit. The reason for this 
is that we will extend BTA with an additional sort in Section 1131 

BTA has one sort: the sort T of threads. To build terms of sort T, it has the 
following constants and operators: 

— the deadlock constant D : T; 

— the termination constant S : T; 

— for each a G -4 ta u, the binary postconditional composition operator <jal> : 
TxT^T. 

We assume that there are infinitely many variables of sort T, including x, y, z. 
Terms of sort T are built as usual. We use infix notation for the postconditional 
composition operators. We introduce basic action prefixing as an abbreviation: 
a o t, where a € Atau and t is a term of sort T, abbreviates t < a > t. 

The thread denoted by a closed term of the form t < a > t' will first perform 
a, and then proceed as the thread denoted by t if the reply from the execution 
environment is T and proceed as the thread denoted by t' if the reply from 
the execution environment is F. The threads denoted by D and S will become 
inactive and terminate, respectively. 

BTA has only one axiom. This axiom is given in Table Using the abbrevia- 
tion introduced above, axiom Tl can be written as follows: x < tau > y = tau o x. 

Notice that each closed BTA term denotes a thread that will become inactive 
or terminate after it has performed finitely many actions. Infinite threads can 
be described by guarded recursion. 

A guarded recursive specification over BTA is a set of recursion equations 
E = {X = tx | X e V}, where V is a set of variables of sort T and each tx is a 
BTA term of the form D, S or t < a > t' with t and t' that contain only variables 
from V. We write V(E) for the set of all variables that occur in E. We are 
only interested in models of BTA in which guarded recursive specifications have 
unique solutions, such as the projective limit model of BTA presented in [3]. 

For each guarded recursive specification E and each X £ V(E), we introduce 
a constant (X\E) of sort T standing for the unique solution of E for X. We 
write (tx\E) for tx with, for all Y e V{E), all occurrences of Y in tx replaced 
by (Y\E). The axioms for the constants standing for the unique solution of 
guarded recursive specifications are RDP (Recursive Definition Principle) and 
RSP (Recursive Specification Principle), which are given in Table |3j RDP and 
RSP are actually axiom schemas in which X stands for an arbitrary variable, 
tx stands for an arbitrary BTA term, and E stands for an arbitrary guarded 
recursive specification over BTA. Side conditions are added to restrict what X, 
t x and E stand for. 

Closed terms of BTA extended with constants for solutions of guarded recur- 
sive specifications that denote the same infinite thread cannot always be proved 
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Table 3. RDP, RSP and AIP 



(X\E) = (tx\E) 


if x = t x e £ 


RDP 


ttq(x) = D 


PO 


E => X = 


if x e V(E) 


RSP 


7T n + l(S) = S 


PI 








7T„ + l(D) = D 


P2 




(y) ^x = y 


AIP 


n n+1 (x <3a\>y) = 7T„(x) 


<a>n n (y) P3 



equal by means of the axiom of BTA, RDP and RSP. We introduce AIP (Approx- 
imation Induction Principle) to remedy this. AIP is based on the view that two 
threads are identical if their approximations up to any finite depth are identical. 
The approximation up to depth n of a thread is obtained by cutting it off after 
it has performed n actions. AIP is also given in Table [3] Here, approximation 
up to depth n is phrased in terms of the unary projection operator 7r„ : T — > T. 
The axioms for these operators are axioms P0-P3 in Tabled P1-P3 are actually 
axiom schemas in which a stands for arbitrary basic action and n stands for an 
arbitrary natural number. 

We write BTA+REC for BTA extended with the constants for solutions of 
guarded recursive specifications, the projection operators and the axioms RDP, 
RSP, AIP and P0-P3. 

The minimal models of BTA+REC are considered its standard models. Recall 
that a model is minimal if the elements of the domains associated with the 
sorts can be denoted by closed terms. Henceforth, we restrict ourselves to the 
minimal models of BTA+REC. We assume that a minimal model A^bta+rec 
of BTA+REC has been given. 

We use the term thread for the elements from the domain of AIbta+reCj 
and we denote the interpretations of constants and operators in A^bta+rec by 
the constants and operators themselves. 

Let T be a thread. Then the set of states or residual threads of T, written 
Res(T), is inductively defined as follows: 

- T g Res(T); 

- if T <a> T" g Res{T), then T 6 Res{T) and T" g Res(T). 

Let T be a thread and let A' C _4 tau . Then T is regular over A' if the following 
conditions are satisfied: 

- Res(T) is finite; 

- for all T',T" g Res(T) and a g Aau, T' <a> T" g Res(T) implies a £ A'. 

We say that T is regular if T is regular over At 3U - 

We will make use of the fact that being a regular thread coincides with being 
the solution of a finite guarded recursive specification in which the right-hand 
sides of the recursion equations are of a restricted form. 

A linear recursive specification over BTA is a guarded recursive specification 
E = {X = tx | X G V} over BTA, where each tx is a term of the form D, S or 
Y < a > Z with Y,Z eV. 
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Table 4. Defining equations for thread extraction operation 



a ; F| = ao \F\ 



a\ = a o D 



+a ■ F\ = \F\ <a> |#2 ; F\ 



+a\ = aoD 



-a;F\ = |#2;F|<a>|F| 



— a\ = a o D 



m\ = d 

\#0;F\ = D 

\m-,F\ = \F\ 

\#l + 2;u\ = D 

|#/ + 2; W ;F| = |#/ + 1;F| 

|!|=S 

|!;F|=S 



Proposition 1. Let T be a thread and let A' C At au - Then T is regular over A' 
iff there exists a finite linear recursive specification E over BTA in which only 
basic actions from A' occur such that T is the solution of E for some X S V(E). 

Proof. This proposition generalizes Theorem 1 from [T5] from the projective 
limit model of BTA to an arbitrary minimal model of BTA. However, the proof 
of that theorem is applicable to any minimal model of BTA. □ 

4 Thread Extraction 

In this short section, we use BTA+REC to make mathematically precise which 
threads are produced by instruction sequences under execution. 

For that purpose, A is taken such that A 3 21 is satisfied. 

The thread extraction operation |_| assigns a thread to each instruction se- 
quence. The thread extraction operation is denned by the equations given in 
Table H (for a e 21, I 6 N, and u e J) and the rule that #2 ; F\ = D if #Z is the 
beginning of an infinite jump chain. This rule is formalized in e.g. [8]. 

Let F be an instruction sequence and T be a thread. Then we say that F 
produces T if = T . 

5 Program-Service Interaction Instructions 

Recall that, in PGA, it is assumed that a fixed but arbitrary set 21 of basic 
instructions has been given. In the sequel, we will make use a version of PGA in 
which the following additional assumptions relating to 21 are made: 

— a fixed but arbitrary set T of foci has been given; 

— a fixed but arbitrary set M. of methods has been given; 



Each focus plays the role of a name of some service provided by an execution 
environment that can be requested to process a command. Each method plays 
the role of a command proper. Executing a basic instruction of the form f.m is 
taken as making a request to the service named / to process command m. 



2l = {/.m|/eJ r ,meM}. 



s 



A basic instruction of the form f.m is called a program-service interaction 
instruction. Recall that, in BTA, it is assumed that a fixed but arbitrary set A 
of basic actions has been given. In the sequel, we will make use of a version of 
BTA in which A = 21. A basic action of the form f.m is called a thread- service 
interaction action. 

The intuition concerning program-service interaction instructions given above 
will be made fully precise in Section[71 using the general-purpose process algebra 
ACP. 

6 Process Algebra 

In this section, we review ACP T (Algebra of Communicating Processes with 
abstraction). This process algebra will among other things be used to make 
precise what processes are produced by the threads denoted by closed terms 
of BTA+REC. For a comprehensive overview of ACP T , the reader is referred 
to [2TT3] . 

In ACP T , it is assumed that a fixed but arbitrary set A of atomic actions, 
with r, S A, and a fixed but arbitrary commutative and associative function 
| : AU{t} x AU{t} -> AU{<5}, with r | e = 5 for all e G AU{r}, have been given. 
The function | is regarded to give the result of synchronously performing any two 
atomic actions for which this is possible, and to give S otherwise. In ACP T , r is a 
special atomic action, called the silent step. The act of performing the silent step 
is considered unobservable. Because it would otherwise be observable, the silent 
step is considered an atomic action that cannot be performed synchronously 
with other atomic actions. We write A T for A U {r}. 

ACP r has the following constants and operators: 

— for each e € A, the atomic action constant e ; 

— the silent step constant r ; 

— the deadlock constant S ; 

— the binary alternative composition operator + ; 

— the binary sequential composition operator • ; 

— the binary parallel composition operator || ; 

— the binary left merge operator [|_ ; 

— the binary communication merge operator | ; 

— for each H C A, the unary encapsulation operator 8h ; 

— for each I C A, the unary abstraction operator n . 

We assume that there are infinitely many variables, including x, y, z. Terms are 
built as usual. We use infix notation for the binary operators. 

Let t and t' be closed ACP r terms, e 6 A, and H, I C A. Intuitively, the 
constants and operators to build ACP T terms can be explained as follows: 

— the process denoted by e first performs atomic action e and next terminates 
successfully; 

— the process denoted by r performs an unobservable atomic action and next 
terminates successfully; 
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Table 5. Axioms of ACP r 



x + y — y + x 


Al 


X ■ T = X 




Bl 


(x + y) + z = x + (y + z) 


A2 


x ■ {t ■ {y + 


z) + y)=x-(y + z) 


132 


X + X = X 


A3 








(x + y) ■ z — x ■ z + y ■ z 


A4 


d H (a) = a 


if a<£H 


Dl 


(x -y) ■ z = x ■ (y • z) 


A5 


d H (a) = 8 


if a G H 


D2 


x + 8 = x 


A6 


d H (x + y) = 


= d H {x) + d H {y) 


D3 


5 ■ x — 5 


A7 


d H (x ■ y) = 


d H (x) ■ d H (y) 


D4 


x\\y = x\ L y + y\ L x + x\ y 


CM1 


T/(a) = a 


if ail 


Til 


a [j_ x = a • x 


CM2 


rj(a) = t 


if a 6 7 


TI2 


a ■ x [I y = a ■ (x \\ y) 


CM3 


ti(x + y) = 


: Tl(x) + Tl(y) 


TI3 


(x + y)\\_z = x\Lz + y\[z 


CM4 


ti(x ■ y) = 


ti{x) ■ Ti(y) 


TI4 


a ■ x b = (a | 6) ■ x 


CM5 








a | b ■ x = (a | 6) • x 


CM6 


a | b = b | a 




CI 


a -x | b ■ y = (a | 6) • (x \\ y) 


CM7 


(a\b)\c = 


a\(b\c) 


C2 


(x + y)\z — x\z + y\ z 


CM8 


8\a = 8 




C3 


x\(y + z)— x\y + x\ z 


CM9 


t \ a — S 




C4 



— the process denoted by S can neither perform an atomic action nor terminate 
successfully; 

— the process denoted by t + t' behaves either as the process denoted by t or 
as the process denoted by t' , but not both; 

— the process denoted by t ■ t' first behaves as the process denoted by t and on 
successful termination of that process it next behaves as the process denoted 
by t'; 

— the process denoted by t \\ t' behaves as the process that proceeds with the 
processes denoted by t and t' in parallel; 

— the process denoted by t [|_ t' behaves the same as the process denoted by 
t || t' , except that it starts with performing an atomic action of the process 
denoted by t; 

— the process denoted by t\t' behaves the same as the process denoted by t \\ t', 
except that it starts with performing an atomic action of the process denoted 
by t and an atomic action of the process denoted by t' synchronously; 

— the process denoted by dnit) behaves the same as the process denoted by t, 
except that atomic actions from H are blocked; 

— the process denoted by Tj(t) behaves the same as the process denoted by 
t, except that atomic actions from / are turned into unobservable atomic 
actions. 

The operators [[ and | are of an auxiliary nature. They are needed to axiomatize 
ACP T . 

The axioms of ACP r are given in Table El CM2-CM3, CM5-CM7, C1-C4, 
D1-D4 and TI1-TI4 are actually axiom schemas in which a, b and c stand for 
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Table 6. RDP, RSP and AIP 



(X\E) = (t x \E) 


if X = t x £ E RDP 


7r (a) = 5 




PR1 


E X = (X\E) 


if X G V(S) RSP 


7Tn + l(a) = 


a 


PR2 






7T (a • x) = 


5 


PR3 




{y)^x = y AIP 


Tv n+ i(a ■ x) 


' = a ■ 7r„(2:) 


PR4 






TTn(x + y) 


= 7T n (x) + 7T„ 


(y) PR5 






7Tn(T) = T 




PR6 






7Tn(T • X) = 


= r ■ 7r n (a;) 


PR7 



arbitrary constants of ACP T , and H and I stand for arbitrary subsets of A. 
ACP r is extended with guarded recursion like BTA. 

A recursive specification over ACP T is a set of recursion equations E = 
{X = tx | X G V}, where V is a set of variables and each tx is an ACP r term 
containing only variables from V. We write V(i5) for the set of all variables that 
occur in E. Let t be an ACP T term without occurrences of abstraction operators 
containing a variable X. Then an occurrence of X in t is guarded if t has a 
subterm of the form e • t' where e s A and t' is a term containing this occurrence 
of X . Let E be a recursive specification over ACP 7 " . Then 15 is a guarded recursive 
specification if, in each equation X = tx € J5: (i) abstraction operators do not 
occur in tx and (ii) all occurrences of variables in tx are guarded or tx can be 
rewritten to such a term using the axioms of ACP T in either direction and/or 
the equations in E except the equation X — tx from left to right. We are only 
interested models of ACP r in which guarded recursive specifications have unique 
solutions, such as the models of ACP r presented in [2]. 

For each guarded recursive specification E and each X £ Y{E), we introduce 
a constant (X\E) standing for the unique solution of E for X. We write (tx\E) 
for tx with, for all Y £ V(I5), all occurrences of Y in tx replaced by (Y\E). The 
axioms for the constants standing for the unique solution of guarded recursive 
specifications are RDP and RSP, which are given in Table [SI RDP and RSP are 
actually axiom schemas in which X stands for an arbitrary variable, tx stands 
for an arbitrary ACP 7 " term, and E stands for an arbitrary guarded recursive 
specification over ACP T . Side conditions are added to restrict what X, tx and 
E stand for. 

Closed terms of ACP r extended with constants for solutions of guarded recur- 
sive specifications that denote the same process cannot always be proved equal 
by means of the axioms of ACP r together with RDP and RSP. To remedy this, 
we introduce AIP. AIP is based on the view that two processes are identical if 
their approximations up to any finite depth are identical. The approximation up 
to depth n of a process behaves the same as that process, except that it cannot 
perform any further atomic action after n atomic actions have been performed. 
AIP is given in Table [6l Here, approximation up to depth n is phrased in terms 
of a unary projection operator n n . The axioms for these operators are axioms 
PR1-PR7 in Table [6l PR1-PR7 are actually axiom schemas in which a stands 
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for arbitrary constants of ACP T different from r and n stands for an arbitrary 
natural number. 

We write ACP r +REC for ACP T extended with the constants for solutions of 
guarded recursive specifications, the projection operators, and the axioms RDP, 
RSP, AIP and PR1-PR7. 

The minimal models of ACP T +REC are considered its standard models. 
Henceforth, we restrict ourselves to the minimal models of ACP T +REC. We 
assume that a fixed but arbitrary minimal model A^t acp t +rec of ACP r +REC 
has been given. 

From Section [TSJ, we will sometimes assume that CFAR (Cluster Fair Ab- 
straction Rule) is valid in -Macp t +rec- CFAR says that a cluster of silent steps 
that has exits can be eliminated if all exits are reachable from everywhere in the 
cluster. A precise formulation of CFAR can be found in |13j . 

We use the term process for the elements from the domain of A1acp t +reCj 
and we denote the interpretations of constants and operators in A1acp t +rec 
by the constants and operators themselves. 

Let P be a process. Then the set of states or subprocesses of P, written 
Sub(P), is inductively defined as follows: 

- P £ Sub{P); 

- if e • P' e Sub{P), then P' G Sub{P)\ 

- if e • P' + P" e Sub(P), then P' G Sub(P). 

Let P be a process and let A' C A T . Then P is regular over A' if the following 
conditions are satisfied: 

— Sub(P) is finite; 

- for all P' € Sub{P) and e G A r , e • P' G Sub(P) implies e G A'; 

- for all P', P" G Sub{P) and e G A T , e • P' + P" G Sub{P) implies e 6 A'. 

We say that P is regular if P is regular over A r . 

We will make use of the fact that being a regular process over A coincides 
with being the solution of a finite guarded recursive specification in which the 
right-hand sides of the recursion equations are linear terms. Linearity of terms 
is inductively defined as follows: 

— 5 is linear; 

— if e € A T , then e is linear; 

— if e G A T and X is a variable, then e • X is linear; 

— if t and t' are linear, then t + t' is linear. 

A linear recursive specification over ACP T is a guarded recursive specification 
E = {X = tx | X G V} over ACP r , where each tx is linear. 

Proposition 2. Let P be a process and let A' C A. Then P is regular over 
A' iff there exists a finite linear recursive specification E over ACP T in which 
only atomic actions from A' occur such that P is the solution of E for some 
X g V(E). 
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Table 7. Defining equations for process extraction operation 



|S| C = stop 
|D| C = i-«5 

\T<tau>T'\ c =i-i - \T\ C 

\T<f.m>TT = s/(m)- (r f (T) ■ \T\ C + r/ (F) ■ [Tf) 

Proof. The proof follows the same line as the proof of Proposition [TJ □ 

Remark 1. Proposition [2] is concerned with processes that are regular over A. 
We can also prove that being a regular process over A T coincides with being the 
solution of a finite linear recursive specification over ACP r if we assume that the 
cluster fair abstraction rule [T3] holds in the model .Macp^+rec- However, we 
do not need this more general result. 

We will write X]ieS^> wnere S = {*i> an d ti 1 ,...,ti n are ACP r 

terms, for +. . . + £j n . The convention is that X^es ^ stands for 8 if 5 = 0. We 
will often write X for (X\E) if £ is clear from the context. It should be borne 
in mind that, in such cases, we use X as a constant. 

7 Process Extraction 

In this section, we use ACP r +REC to make mathematically precise which pro- 
cesses are produced by threads. 

For that purpose, A and | are taken such that the following conditions are 
satisfiedQ 

A 2 {sf(d) \feF,d€ M UB}U{r/(d) |/eJ",deXUB}U {stop,i} 
and for all / e J 7 , d £ M U B, and e e A: 
s /«) I r/W = i , 

s/(d) | e = 5 if e ^ 17(d) , stop e = S if e ^ stop , 

e \r f(d) — S if e 7^ s/(d) , i | e = <5 . 

Actions of the forms s/(d) and r/(ci) are send and receive actions, respectively, 
stop is an explicit termination action, and i is a concrete internal action. 

The process extraction operation |_| assigns a process to each thread. The 
process extraction operation |_| is defined by \T\ = T{ stop }(|T| c ), where |_| c is 
defined by the equations given in Table [7] (for / e T and m G M). 

Let P be a process, T be a thread, and F be an instruction sequence. Then 
we say that T produces P if r ■ tj(\T\) = t ■ P for some I C A, and we say that 
F produces P if |F| produces P. 

Notice that two atomic actions are involved in performing a basic action of 
the form f.m: one for sending a request to process command m to the service 

2 As usual, we will write B for the set {T, F}. 
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named / and another for receiving a reply from that service upon completion 
of the processing. Notice also that, for each thread T, \T\ C is a process that 
in the event of termination performs a special termination action just before 
termination. Abstraction from this termination action yields the process denoted 

by m 

The process extraction operation preserves the axioms of BTA+REC. Before 
we make this fully precise, we have a closer look at the axioms of BTA+REC. 

A proper axiom is an equation or a conditional equation. In Table we 
do not find proper axioms. Instead of proper axioms, we find axiom schemas 
without side conditions and axiom schemas with side conditions. The axioms of 
BTA+REC are obtained by replacing each axiom schema by all its instances. 

Henceforth, we write a*, where a is a valuation of variables in A^bta+reC) 
for the unique homomorphic extension of a to terms of BTA+REC. Moreover, 
we identify t\ = t 2 and =^ t\ = t 2 . 

Proposition 3. Let E t\ = t 2 be an axiom of BTA+REC, and let a be 
a valuation of variables in A^bta+rec- Then «* (t 1 ) = Q:* (^2) | if |o ! *(^i)| — 
\a*(t' 2 )\ for all t[ — t' 2 S E. 

Proof. The proof is trivial. □ 

Remark 2. Proposition [3] would go through if no abstraction of the above-men- 
tioned special termination action was made. Notice further that ACP T without 
the silent step constant and the abstraction operator, better known as ACP, 
would suffice if no abstraction of the special termination action was made. 

8 A Simple Protocol for Instruction Stream Processing 

In this section and the next section, we consider protocols for instruction stream 
processing. Before the first protocol is described, an extension of ACP is intro- 
duced to simplify the description of the protocols. 

The following extension of ACP from [T] will be used: the non-branching 
conditional operator :— > over B. The expression b:—>p, is to be read as if b then 
p else S. The axioms for the non-branching conditional operator are 

T :— )• x — x and F :— > x = 5 . 

The protocols concern systems whose main components are an instruction 
stream generator and an instruction stream execution unit. The instruction 
stream generator generates different instruction streams for different threads. 
This is accomplished by starting it in different states. The general idea of the 
protocols is that: 

— the instruction stream generator generating an instruction stream for a 
thread T < a > T' sends a to the instruction stream execution unit; 

— on receipt of a, the instruction stream execution unit gets the execution of 
a done and sends the reply produced to the instruction stream generator; 
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— on receipt of the reply, the instruction stream generator proceeds with gen- 
erating an instruction stream for T if the reply is T and for T' otherwise. 

In the case where the thread is S or D, the instruction stream generator sends a 
special instruction (stop or dead) and the instruction stream execution unit does 
not send back a reply. 

In this section, we consider a very simple protocol for instruction stream 
processing that makes no effort to keep the execution unit busy without inter- 
mission. 

We write I for the set Ati {stop, dead}. Elements from I will loosely be called 
instructions. The restriction of the domain of A1bta+rec to the regular threads 
will be denoted by 72T. 

The functions act, thrt, and thrf defined below give, for each thread T dif- 
ferent from S and D, the basic action that T will perform first, the thread with 
which it will proceed if the reply from the execution environment is T, and the 
thread with which it will proceed if the reply from the execution environment is 
F, respectively. The functions act:lZT — > I, thrt:lZT — > 727", and thrf:lZT — > 1ZT 
are defined as follows: 

act(S) = stop , thrt(S) = D , thrf(S) = D , 

oci(D) = dead , thrt(D) = D , thrf (D) = D , 

act{T <a\>T') = a , thrt(T <a> T') = T , thrf (T <a>T') = T' . 

The function nxt° defined below is used to distinguish between the execution 
of a basic action a G A, which leads to a reply, and the execution of S or D, which 
leads to termination or inaction. The function nxt° : I x 1ZT — > B is defined as 
follows: 



nxt°(a, T) 



T if act(T) = a 
F if act{T) ^ a 



For the purpose of describing the simple protocol outlined above in ACP T , 
A and | are taken such that, in addition to the conditions mentioned at the 
beginning of Section [71 the following conditions are satisfied: 

A 2 {si(d) | * G {1, 2}, d G 1} U {r,(d) | i G {1, 2}, del} 
U {s,(r) | i G {3, 4}, r G 1} U {r,(r) | i G {3, 4}, r G B} U {j} 

and for all i G {1, 2}, j £ {3, 4}, d G X, r G B, and e G A: 

Si{d) \ii(d)=j, Sj(r) | Tj{r) = j , 

Si(d) | e = 6 if e ^ Xi{d) , Sj(r) \ e = 5 if e ^ xj(r) , 

e | ii(d) = 5 if e Sj(d) , e | ry(r) =5 if e ^ s 3 (r) , 

j | e = 5 . 

Notice that the set B is the set of replies. 

Let T G 727". Then the process representing the simple protocol for instruc- 
tion stream processing with regard to thread T is described by 

d H {ISG° T || IMTC || RTC° \\ ISEU ) , 
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where the process ISG^ is recursively specified by the following equation: 

ISG° T = nxt°(f.m,T) :-> 

f - m£A Sl (/.m) ■ (r 4 (T) • ISG° hrt(T) + r 4 (F) • ISG° hrRT) ) 
+ nxt° (stop, T) Si(stop) + nit (dead, T) Si(dead) , 

the process IMTC is recursively specified by the following equation: 

/MTC° = ^ri(d) • s 2 (d) • IMTC , 
del 

the process RTC° is recursively specified by the following equation: 
RTC° = ^r 3 (r) • s 4 (r) • i?TC° , 

rGB 

the process ISEU is recursively specified by the following equation: 
ISEU = J2 Mf-m) ■ s/(m) • (r/(T) • s 3 (T) + r/(F) • 83(F)) ■ 

f.meA 

+ r 2 (stop) + r 2 (dead) • i • 8 

and 

= {si(d) \i g {1, 2}, rfel}u { ri (d) | * e {1, 2}, del} 

U {s,(r) I z G {3, 4}, r £ B} U {r,(r) | i G {3, 4}, r G B} . 

ISGj. is the instruction stream generator for thread T, IMTC is the trans- 
mission channel for messages containing instructions, RTC° is the transmission 
channel for replies, and ISEU is the instruction stream execution unit. 

If we abstract from all communications via the transmission channels, then 
the process denoted by d H {ISG° T \\ IMTC \\ RTC° || ISEU ) and the process 
|T| are equal modulo an initial silent step. 

Theorem 1. For each T G TIT, r ■ T {]} {d H {ISG° T \\ IMTC \\ RTC° \\ ISEU )) 
denotes the process r ■ \T\. 

Proof. Let T G TZT. Moreover, let E be a linear recursive specification over 
ACP T with X G y(E) such that \T\ is the solution of E for X in -Macp t +reo 
By Proposition [5] and the definition of the process extraction operation, it is 
sufficient to prove that 

r • T {]} (d H (ISG° T || IMTC || RTC° \\ ISEU )) = r • (X\E) . 

By AIP, it is sufficient to prove that for all n > 0: 

tt„(t • T {i} (d H (ISG° T || IMTC || RTC° \\ ISEU ))) = 7r„(r • (X\E)) . 

This is easily proved by induction on n and in the inductive step by case distinc- 
tion on the structure of T, using the axioms of ACP r and RDP and in addition 
the fact that \T'\ G Sub(\T\) for all T £ Res(T) and the fact that there exists 
an bijection between Sub (|T|) and V(£7). □ 
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9 A More Complex Protocol 

In this section, we consider a more complex protocol for instruction stream pro- 
cessing that makes an effort to keep the execution unit busy without intermission. 
The specifics of the more complex protocol considered here are that: 

— the instruction stream generator may run ahead of the instruction stream 
execution unit by not waiting for the receipt of the replies resulting from the 
execution of instructions that it has sent earlier; 

— to ensure that the instruction stream execution unit can handle the run- 
ahead, each instruction sent by the instruction stream generator is accom- 
panied with the sequence of replies after which the instruction must be exe- 
cuted; 

— to correct for replies that have not yet reached the instruction stream gen- 
erator, each instruction sent is also accompanied with the number of replies 
received since the last sending of an instruction. 

We write B-™, where neN, for the set {u e B* | len{u) < n}H 

It is assumed that a natural number £ has been given. The number I is taken 

for the maximal number of steps that the instruction stream generator may run 

ahead of the instruction stream execution unit. 

The set XM. of instruction messages is defined as follows: 

XM = {0,1} xB^'xI. 

In an instruction message (n, u, a) G XM: 

— n is the number of replies that are acknowledged by the message; 

— u is the sequence of replies after which the instruction that is part of the 
message must be executed; 

— a is the instruction that is part of the message. 

The instruction stream generator sends instruction messages via an instruction 
message transmission channel to the instruction stream execution unit. We refer 
to a succession of transmitted instruction messages as an instruction stream. An 
instruction stream is dynamic by nature, in contradistinction with an instruction 
sequence. 

The set S 1SG of instruction stream generator states is defined as follows: 
S 1SG = [0,£}xV(M^ e+1 xKT) . 
In an instruction stream generator state (n, R) S <S ISG : 

— n is the number of replies that has been received by the instruction stream 
generator since the last acknowledgement of received replies; 

3 As usual, we write D* for the set of all finite sequences with elements from set D 
and len(a) for the length of finite sequence a. Moreover, we write e for the empty 
sequence, d for the sequence having d as sole element, a a' for the concatenation of 
finite sequences a and a' , and tl(a) for the tail of finite sequence a. 
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— in each (u, T) £ R, u is the sequence of replies after which the thread T must 
be performed. 

The functions updpm and updcr defined below are used to model the updates of 
the instruction stream generator state on producing a message and consuming 
a reply, respectively. The function updpm : (B- x TZT) x S ISG — > S ISG is defined 
as follows: 



The function updcr : B x 5 ISG — > 5 ISG is defined as follows: 

updcr{r, {n, R)) = (n + 1, {(u, T) \ {ru, T) £ R}) . 

The function sel defined below is used to model the selection of the sequence of 
replies and the instruction that will be part of the next message produced by the 
instruction stream generator. The function sel : P(B^ e x TZT) -> P(B^ e x TZT) 
is defined as follows: 

sel(R) = {(u, T) G R \ M{v, T') £ R • len{u) < len(v) A len(u) < £} . 

Notice that (u,T) G sel(R) and (v,T') G R only if u < v. By that depth-first 
run-ahead is excluded. It happens that the performance of the protocol may 
change considerably if the function sel is replaced by another function. 

The set iS ISE u of instruction stream execution unit states is defined as follows: 



In an instruction stream execution unit state (n, S) G iS ISEU : 

— n is the number of replies for which the instruction stream execution unit 
still has to receive an acknowledgement; 

— in each (it, a) G S, u is the sequence of replies after which the instruction a 
must be executed. 

The functions updem and updpr defined below are used to model the updates of 
the instruction stream execution unit state on producing a reply and consuming 
a message, respectively. The function updem : XM. x <S ISEU — > tSi SE u is defined as 
follows: 



The function updpr : B x 5 ISEU S 1SEV is defined as follows: 

updpr(r, (n, S)) = (n + 1, {(u, a) | (ru, a) G S}) . 

The function nxt defined below is used to distinguish between the execution of 
a basic action a £ A, which leads to a reply, and the execution of S or D, which 

4 tl n (u) is defined by induction on n as usual: tl°(u) = u and tl n+1 (u) = tl(tl n+1 (u)). 



updpm((u, T), (n, R)) = 




'ISEU — 



[0,^] x P(M- e x X) . 



updcm((k,u,a),(n,S)) = (n - k, S U {{tl n - k {u), a)}) £ 
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leads to termination or inaction. The function nxt:Ix V(M- e xl) — > B is denned 
as follows: 



The instruction stream execution unit sends replies via a reply transmission 
channel to the instruction stream generator. We refer to a succession of trans- 
mitted replies as a reply stream. 

For the purpose of describing the transmission protocol in ACP r , A and | 
are taken such that, in addition to the conditions mentioned at the beginning of 
Section [71 the following conditions are satisfied: 



Let T E 1ZT. Then the process representing the more complex protocol for 
instruction stream processing with regard to thread T is described by 



where the process ISGr is recursively specified by the following equations: 




A 2 {Si{d) | i e {1, 2}, d e 1M} U {^(d) \ ie{l, 2}, d E IM} 
U { Sl (r) | i E {3, 4}, r E B} U {r,(r) | i € {3, 4}, r E B} U {j} 

and for all i e {1, 2}, j E {3, 4}, d e 1M, reB, and e E A: 



Si(d) \ii(d) =j , Sj{r) | ij{r) = j , 

Si(d)|e = <5 ife^ri(d), Sj(r)|e = <5 if e ^ r .,• (r) , 

e | ri(d) = 5 ife^s<(d), e|ry(r) = <!> ife^Sj(r), 



d H (ISGr || IMTC \\ RTC \\ ISEU) , 



J5G; 



'(0,{(e,T)}) i 




(u,T)£sel(R) 



+ 




(for every (n, i?) € <S ISG with i? ^ 0) , 



(for every (n, 0) £ <S ISG ) , 
the process IMTC is recursively specified by the following equation: 



IMTC = r i( d ) ' s 2( d ) ' ^MTC , 



delM 



the process i?TC is recursively specified by the following equation: 



RTC = ^ r s(0 ■ s 4 (r) • RTC , 
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the process ISEU is recursively specified by the following equations: 
ISEU = ISEU{ m , 

ISEU( niS )= ^ r 2 (d) • ISEUu pc i cm (d,(n,S)) 

delM 

+ nxt{f.m,S):^s f {m)-ISEU'( n>s) 

f.meA 

+ nxt(stop, 5) :— > j + nxt(dead 7 5) :— ¥ i ■ S 
(for every (n, 5) G 5 ISEU ) , 

ISEU (n,S) = ' S3 ( r ) ' ISEU 'updpr(r,{n,S)) 

delM 

(for every (n, 5) G 5 ISEU ) , 

and 

i? = {s,(d) | i e {l,2},deZM}U{r 4 (d) | i G {l,2},rf€ZM} 
U {Si(r) 1 1 G {3, 4}, r e B} U {r,(r) | i G {3, 4}, r G 1} . 

15 Gt is the instruction stream generator for thread T, IMTC is the transmission 
channel for instruction messages, RTC is the transmission channel for replies, 
and ISEU is the instruction stream execution unit. 

The protocol described above has been designed such that, for each T G 1ZT, 
r ■ T U} (d H {ISGT || IMTC || RTC \\ ISEU)) denotes the process r • \T\. We refrain 
from presenting a proof of the claim that the protocol satisfies this because this 
paper is first and foremost a conceptual paper and the proof is straightforward 
but tedious. 

The transmission channels IMTC and RTC can keep one instruction message 
and one reply, respectively. The protocol has been designed in such a way that 
the protocol will also work properly if these channels are replaced by channels 
with larger capacity and even by channels with unbounded capacity. 

10 Adaptations of the Protocol 

In this section, we discuss some conceivable adaptations of the protocol described 
in Section O 

Consider the case where, for each instruction, it is known what the probability 
is with which its execution leads to the reply T. This might give reason to 
adapt the protocol described in Section [9l Suppose that the instruction stream 
generator states do not only keep the sequences of replies after which threads 
must be performed, but also the sequences of instructions involved in producing 
those sequences of replies. Then the probability with which the sequences of 
replies will happen can be calculated and several conceivable adaptations of the 
protocol to this probabilistic knowledge are possible by mere changes in the 
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selection of the sequence of replies and the instruction that will be part of the 
next instruction message produced by the instruction stream generator. Among 
those adaptations are: 

— restricting the instruction messages that are produced ahead to the ones 
where the sequence of replies after which the instruction must be executed 
will happen with a probability > 0.50, but sticking to breadth-first run- 
ahead; 

— restricting the instruction messages that are produced ahead to the ones 
where the sequence of replies after which the instruction must be executed 
will happen with a probability > 0.95, but not sticking to breadth-first run- 
ahead. 

Regular threads can be represented in such a way that it is effectively decid- 
able whether the two threads with which a thread may proceed after performing 
its first action are identical. Consider the case where threads are represented in 
the instruction stream generator states in such a way. Then the protocol can be 
adapted such that no duplication of instruction messages takes place in the cases 
where the two threads with which a thread possibly proceeds after performing 
its first action are identical. This can be accomplished by using sequences of 
elements from B U {*}, instead of sequences of elements from B, in instruction 
messages, instruction stream generator states, and instruction stream execution 
unit states. The occurrence of * at position i in a sequence indicates that the 
ith reply may be either T or F. The impact of this change on the updates of 
instruction stream generator states and instruction stream execution unit states 
is minor. 

11 Alternative Choice Instructions 

Process algebras such as ACP, CCS and CSP are considered relevant to com- 
puter science, as is witnesses by the extent of the work on them in theoretical 
computer science. This means that there must be programmed systems whose 
behaviours are taken for processes as considered in such a process algebra. In 
coming sections, we will establish results concerning the processes as considered 
in ACP that can be produced by programs under execution, starting from the 
perception of a program as an instruction sequence. 

For the purpose of producing processes as considered in ACP, we need a 
version of PGA with special basic instructions. Recall that, in PGA, it is assumed 
that a fixed but arbitrary set 21 of basic instructions has been given. In the coming 
sections, we will make use a version of PGA in which the following additional 
assumptions relating to 21 are made: 

— a fixed but arbitrary set J- of foci has been given; 

— a fixed but arbitrary set M. of methods has been given; 

— a fixed but arbitrary set AA of atomic actions, with t ^ AA, has been given; 

— 21 = {f.m | / G T,m G M} U {ac(e 1 ,e 2 ) | e 1; e 2 G AAU {t}}. 
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Table 8. Additional defining equation for process extraction operation 
\T < ac(e, e') > T'| c = e • |T| C + e' • |T'| C 



On execution of a basic instruction ac(ei, e2), first a non-deterministic choice 
between the atomic actions e\ and ei is made and then the chosen atomic action 
is performed. The reply T is produced if e% is performed and the reply F is pro- 
duced if e2 is performed. Basic instructions of this kind are material to produce 
all regular processes by means of instruction sequences. A basic instruction of 
the form ac(ei,ea) is called a alternative choice instruction. Henceforth, we will 
write PGA ac for the version of PGA with alternative choice instructions. 

The intuition concerning alternative choice instructions given above will be 
made fully precise at the end of this section, using ACP or rather ACP r . It will 
not be made fully precise using an extension of BTA because it is considered a 
basic property of threads that they are deterministic behaviours. 

Recall that we make use of a version of BTA in which A = 21. A basic action 
of the form ac(ei,e2) is called a alternative choice action. Henceforth, we will 
write BTA ac for the version of BTA with alternative choice actions. 

For the purpose of making precise what processes are produced by the threads 
denoted by closed terms of BTA ac +REC, A and | are taken such that, in ad- 
dition to the conditions mentioned at the beginning of Section [3 the following 
conditions are satisfied: 

A D AA U {t} 

and for all e, e' G A: 

e'\e = 8 if e' £ AA U {t} . 

The process extraction operation for BTA ac has as defining equations the 
equations given in Table [7] and in addition the equation given in Table |5] 
Proposition [3] goes through for BTA ac . 

12 Instruction Sequence Producible Processes 

It follows immediately from the definitions of the thread extraction and process 
extraction operations that the instruction sequences considered in PGA produce 
regular processes. The question is whether all regular processs are producible by 
these instruction sequences. In this section, we show that all regular processes can 
be produced by the instruction sequences with alternative choice instructions. 

We will make use of the fact that all regular threads over A can be produced 
by the single-pass instruction sequences considered in PGA. 

Proposition 4. For each thread T that is regular over A, there exists a PGA 
instruction sequence F such that F produces T , i.e. \F\ = T . 
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Proof. This proposition generalizes one direction of Proposition 2 from [f 8 from 
the projective limit model of BTA to an arbitrary minimal model of BTA. 
However, the proof of that proposition is applicable to any minimal model of 
BTA. □ 

All regular processes over AA can be produced by the instruction sequences 
considered in PGA ac . 

Theorem 2. Assume that CFAR is valid in A1acp t +rec- Then, for each pro- 
cess P that is regular over AA, there exists an instruction sequence F in which 
only basic instructions of the form ac(e, t) occur such that F produces P, i.e. 

T-T {t] {\\F\\)=T-P. 

Proof. By Propositions [TJ [2] and 21 it is sufficient to show that, for each finite 
linear recursive specification E over ACP T in which only atomic actions from AA 
occur, there exists a finite linear recursive specification E' over BTA ac in which 
only basic actions of the form ac(e, t) occur such that r- (X\E) — T-T{ t y(\(X\E')\) 
for all X e V(E). 

Take the finite linear recursive specification E over ACP T that consists of 
the recursion equations 



Xi — en ■ Xn + . . . + e.ik, ■ X^ 



-■a 



where en, ■ ■ ■ , e,^, e' a , . . . , e' a . £ AA, for i € {1, ...n}. Then construct the fi- 
nite linear recursive specification E' over BTA ac that consists of the recursion 
equations 

X, = X a < ac(e a , t) > (. . . (X iki < ac(e ifej , t) > 

(S < ac(4, t) > (. . . (S < ac(e^ , t) > X t ) . . .))) . . .) 

for i 6 {1, . . .n}; and the finite linear recursive specification E" over ACP T that 
consists of the recursion equations 

Xi = en ■ Xn + t-Y l2 , Zn = e' iX + t-Z t2 , 

Yi2 = ei2 ■ Xi2 + t ■ Yii , Zii = e i2 + t • Za , 



Yiki = e^ ■ Xikt + t • Zn , Zui — e' a . + 1 • Xi , 

where Yii,...,Yn- i ,Zi\,...,Zn i are fresh variables, for i £ {l,...n}. It fol- 
lows immediately from the definition of the process extraction operation that 
\{X\E')\ = (X\E") for all X E Y(E). Moreover, it follows from CFAR that 
t-(X\E) = T-T {t} {{X\E")) for all X e V(E). Hence, t-(X\E) = T-T {t} (\(X\E')\) 
for all X e V(E). □ 

Remark 3. Theorem |2] with "r ■ T {t} (||F||) = r • P" replaced by "||F|| = P" can 
be established if PGA is extended with multiple-reply test instructions, see [7]. 
In that case, the assumption that CFAR is valid is superfluous. 
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13 Services and Use Operators 

An instruction sequence under execution may make use of services. That is, 
certain instructions may be executed for the purpose of having the behaviour 
produced by the instruction sequence affected by a service that takes those in- 
structions as commands to be processed. Likewise, a thread may perform certain 
actions for the purpose of having itself affected by a service that takes those ac- 
tions as commands to be processed. The processing of an action may involve a 
change of state of the service and at completion of the processing of the action 
the service returns a reply value to the thread. The reply value determines how 
the thread proceeds. The use operators can be used in combination with the 
thread extraction operation from Section 0] to describe the behaviour produced 
by instruction sequences that make use of services. In this section, we first review 
the use operators, which are concerned with threads making such use of services, 
and then extend the process extraction operation to the use operators. 
A service H consists of 

— a set S of states; 

— an effect function eff : M. X S S; 

— a yield function yld : M X S — > B U {B}; 

— an initial state sq G S: 

satisfying the following condition: 

Vm G M, s G S • (yld(m, s) = B =>• Vm' G M • yld(m' , eff(m, s j) = B) . 

The set S contains the states in which the service may be, and the functions eff 
and yld give, for each method to and state s, the state and reply, respectively, 
that result from processing to in state s. By the condition imposed on services, 
once the service has returned B as reply, it keeps returning B as reply. 

Let H = (S, eff , yld, sq) be a service and let to G M.. Then the derived service 
of H after processing to, written , is the service (S, eff , yld, eff(m, Sq)); and 
the reply of H after processing to, written H(m), is yld(m, s ). 

When a thread makes a request to the service to process to: 

— if H(m) ^ B, then the request is accepted, the reply is H(m), and the service 
proceeds as -£^H; 

— if H(m) = B, then the request is rejected and the service proceeds as a 
service that rejects any request. 

We introduce the sort S of services. However, we will not introduce constants 
and operators to build terms of this sort. The sort S, standing for the set of all 
services, is considered a parameter of the extension of BTA being presented. 
Moreover, we introduce, for each / G T , the binary use operator _//.:TxS^ 
T. The axioms for these operators are given in Table H] Intuitively, T /f H is the 
thread that results from processing all actions performed by thread T that are 
of the form /.to by service H . When a basic action of the form f.m performed 
by thread T is processed by service H , it is turned into the basic action tau and 
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Table 9. Axioms for use operators 



S/ f H = S 
D/ f H = D 
(x <3tau >y) /f H = 
(x < g.m >y) /f H 
(x < f.m >y)/ f H 



Ul 
U2 

(x/ f H)<t a u>(y/ f H) U3 
--{x/ f H)<g.m>{v/fH) Wf?g U4 

if H(m) = T U5 



: tau o (x / f &H) 



[x< f.m>y) / f H = tau 0(3, / f -fall) if H(m) = F U6 

(x < /.m >y)/fH = D if if(m) = B U7 

(2 < ac(ei , e 2 ) >y)/ f H={x / f H) < ac(ei, e 2 ) > (y /, H) U8 

n„(x/ f H) = n n (n n (x) / f H) U9 



postconditional composition is removed in favour of basic action prefixing on the 
basis of the reply value produced. 

We add the use operators to PGA ac as well. We will only use the extension 
in combination with the thread extraction operation |_| and define \F /f H\ = 
\F\ jf H, Hence, \F / f H\ denotes the thread produced by F if F makes use of 
H . If H is a service such as an unbounded counter, an unbounded stack or a 
Turing tape, then a non-regular thread may be produced. 

In order to extend the process extraction operation to the use operators, we 
need an extension of ACP r with action renaming operators ph, where h: A T — > A T 
such that h(r) = r. The axioms for action renaming are given in [13] . Intuitively, 
Ph{P) behaves as P with each atomic action replaced according to h. We write 
Pe'^e" for the renaming operator with h defined by h(e') = e" and h(e) = e 
ife^e'. 

For the purpose of extending the process extraction operation to the use 
operators, A and | are taken such that, in addition to the conditions mentioned 
at the beginning of Section [71 with everywhere B replaced by B U {B}, and 
the conditions mentioned at the end of Section HU the following conditions are 
satisfied: 

A 3 {sscrvM |relU {B}} U {r scrv (m) | m G M} U {stop*} 
and for all e 6 A, m £ M, and r € 1 U {B}: 

s S orv(?') I e = S , stop I stop = stop* , 

e I r SC rv(m) = 8 , stop* | e = 6 . 

We also need to define a set Af C A and a function hf : A T — > A r for each 
/ e .A': 

A f = i s f( d ) I d 6 MUMU {B}} U {cf(d) I d e MUBU{B}} ; 
for all e £ A r , m £ M and r £ B U {B}: 

M S scrvO)) = S/(r) , 

h f (r SCIV (m)) = r/(m) , 

ft/(e) = e if Ar'eN e ^ s scrv (r') A A m 'eA4 e ^ r scrv(m') . 
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Table 10. Adapted and additional defining equations for process extraction operation 



\T < f.m > T'| c = Sf (m) ■ (r f (T) • |T| C + r/ (F) ■ |T'| C + r,(B) • i • 6) 

\t / f h\ c = Pstop ^ stop (d {stop} (d Af (\n II Phf(\H\ c )))) 



To extend the process extraction operation to the use operators, the defin- 
ing equation concerning the postconditional composition operators has to be 
adapted and a new defining equation concerning the use operators has to be 
added. These two equations are given in Table ITUI where \H\ C is the solution of 

{X H , = V r 8erv (m) • s serv (iT(m)) • Xj^ H , + stop | H' e A(H)} 

' * am 

meM 

for Xh, where A(H) is inductively defined as follows: 

- HeA(H); 

- if to S M and H' E A(H), then -^H' G A (if). 

The extended process extraction operation preserves the axioms for the use 
operators. Owing to the presence of axiom schemas with semantic side conditions 
in Table [SJ the axioms for the use operators include proper axioms, which are 
all of the form ti = t 2 , and axioms that have a semantic side condition, which 
are all of the form t\ = t 2 if H(m) — r. By that, the precise formulation of the 
preservation result is somewhat complicated. On the other hand 

Proposition 5. 

1. Let t\ = <2 be a proper axiom for the use operators, and let a be a valuation 
of variables in A1bta+rec • Then \a*{t\)\ = \a*(t2)\- 

2. Let t\ = t 2 if H(m) = r be an axiom with semantic side condition for the 
use operators, and let a be a valuation of variables in A'Ibta+rec- Then 
\a*(h)\ = \a*(t 2 )\ifH(m) = r. 

Proof. The proof is straightforward. We sketch the proof for axiom U5. By 
the definition of the process extraction operation, it is sufficient to show that 
|(T < /.to > T") // H\ c = |tau o (T / f ^H)\ c if H(m) = T. In outline, this goes 
as follows: 

|(T</.TO>T')//ii| c 

- /?stop*i— ^stop 

(d {stop} (d Af ( Sf (m) ■ ( r/ (T) • \n + r/ (F) • \Tf + r/ (B) • i • 6) \\ ^(|ff| c )))) 
= i • i • p s top*^stop{d {st op}(dA f (\T\ c || p hf {\-^H\ c )))) 

= l tau °( T //^)| C - 

In the first and third step, we apply defining equations of |_| c . In the second step, 
we apply axioms of ACP T +REC with action renaming, and use that H(m) = T. 

□ 
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Remark 4- Let F be a PGA ac instruction sequence and H be a service. Then 
| \F/fH 1 1 is the process produced by F if F makes use of H . Instruction sequences 
that make use of services such as unbounded counters, unbounded stacks or 
Turing tapes are interesting because they may produce non-regular processes. 

14 PGLD Programs and the Use of Boolean Registers 

In this section, we show that all regular processes can also be produced by 
programs written in a program notation which is close to existing assembly 
languages, and even by programs in which no atomic action occurs more than 
once in an alternative choice instruction. The latter result requires programs 
that make use of Boolean registers. 

A hierarchy of program notations rooted in PGA is introduced in [5j. One 
program notation that belongs to this hierarchy is PGLD, a very simple program 
notation which is close to existing assembly languages. It has absolute jump 
instructions and no explicit termination instruction. 

In PGLD, like in PGA, it is assumed that there is a fixed but arbitrary hnite 
set of basic instructions 21. The primitive instructions of PGLD differ from the 
primitive instructions of PGA as follows: for each I 6 N, there is an absolute jump 
instruction ##Z instead of a forward jump instruction #1. PGLD programs have 
the form u\) . . . ; life, where u\, . . . , Uk are primitive instructions of PGLD. 

The effects of all instructions in common with PGA are as in PGA with one 
difference: if there is no next instruction to be executed, termination occurs. The 
effect of an absolute jump instruction is that execution proceeds with the 
l-th instruction of the program concerned. If is itself the l-th instruction, 
then deadlock occurs. If I equals or / is greater than the length of the program, 
then termination occurs. 

We define the meaning of PGLD programs by means of a function pgld2pga 
from the set of all PGLD programs to the set of all closed PGA terms. This 
function is defined by 

pgld2pga(ui ;...;u k ) = ((f>i(ui) ; ... ; (j>k{u k ) ;!;!)", 

where the auxiliary functions <j>j from the set of all primitive instructions of 
PGLD to the set of all primitive instructions of PGA are defined as follows 
(l<J<fc): 

<M##0 = #*-j if J </<£:, 

&(##0 = #* + 2-0'-0 if o < z < j , 
0i(##O = i in = ow>fc, 

(f>j(u) =u if u is not a jump instruction . 

PGLD is as expressive as PGA. Before we make this fully precise, we intro- 
duce a useful notation. 

Let a is a valuation of variables in Xpga, and let a* be the unique homo- 
morphic extension of a to terms of PGA. Then a* if) is independent of a if t is 
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a closed term, i.e. a*(t) is uniquely determined by Xpqa- Therefore, we write 
t IpGA for a* (t) if t is a closed term. 

Proposition 6. For each closed PGA term t, there exists a PGLD program p 
such that \t XpGA \ = |pgld2pga(» XpGA | . 

Proof. In [5], a number of functions (called embeddings in that paper) are de- 
fined, whose composition gives, for each closed PGA term t, a PGLD program 
p such that \t XpGA \ = |pgld2pga(p) XpGA |. □ 

Let p be a PGLD program and P be a process. Then we say that p produces 
P if |pgld2pga(p) IpGA | produces P. 

Below, we will write PGLD ac for the version of PGLD in which the additional 
assumptions relating to 21 mentioned in Section [TT] are made. As a corollary of 
Theorem [5] and Proposition [SJ we have that all regular processes over AA can 
be produced by PGLD ac programs. 

Corollary 1. Assume that CFAR is valid in A^acp^+rec- Then, for each pro- 
cess P that is regular over AA, there exists a PGLD ac program p such that p 
produces P. 

We switch to the use of Boolean registers now. First, we describe services 
that make up Boolean registers. 

A Boolean register service accepts the following methods: 

— a set to true method set:T; 

— a set to false method set:F; 

— a get method get. 

We write A^br for the set {set:T, set:F, get}. It is assumed that A^br Q A4. 

The methods accepted by Boolean register services can be explained as fol- 
lows: 

— set:T : the contents of the Boolean register becomes T and the reply is T; 

— set:F : the contents of the Boolean register becomes F and the reply is F; 

— get : nothing changes and the reply is the contents of the Boolean register. 

Let s G 1 U {B}. Then the Boolean register service with initial state s, 
written BR S , is the service (BU {B}, eff , eff, s), where the function eff is defined 
as follows (b e B): 



Notice that the effect and yield functions of a Boolean register service are the 
same. 

Let p be a PGLD program and P be a process. Then we say that p produces 
P using Boolean registers if (. . . (|pgld2pga(p) :rpGA | /b r: i BRf) . . . /t, r: fc BRf) pro- 
duces P for some k G N + . 



e#(set:T,6)=T, 
eff{set:F,b) = F , 
eff(get,b) = b, 



eff(m,b) = B if m £ A1 BR , 
eff(m, B) = B . 
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We have that PGLD ac programs in which no atomic action from AA oc- 
curs more than once in an alternative choice instruction can produce all regular 
processes over AA using Boolean registers. 

Theorem 3. Assume that CFAR is valid in A1acp t +rec- Then, for each pro- 
cess P that is regular over AA, there exists a PGLD ac program p in which each 
atomic action from AA occurs no more than once in an alternative choice in- 
struction such that p produces P using Boolean registers. 

Proof. By the proof of Theorem [2] given in Section [T^l it is sufficient to show 
that, for each thread T that is regular over A, there exist a PGLD program p 
in which each basic action from A occurs no more than once and a k G N + such 
that (. . . (|pgld2pga(p) I ^A| / br:1 BR f ) . . . / br:fe BR f ) = T. 

Let T be a thread that is regular over A. We may assume that T is produced 
by a PGLD program p' of the following form: 

+01 ; ##(3 • h + 1) ; ##(3 • k[ + 1) ; 

+a n ; ##(3 • k n + 1) ; ##(3 • k' n + 1) ; 
##0;##0;##0;##(3-n + 4), 

where, for each i G [l,ra], ki,k[ e [Q,n — 1] (cf. the proof of Proposition 2 
from [18 ). It is easy to see that the PGLD program p that we are looking for 
can be obtained by transforming p 1 : by making use of n Boolean registers, p can 
distinguish between different occurrences of the same basic instruction in p' , and 
in that way simulate p' . □ 

15 Conclusions 

Using the process algebra known as ACP, we have described two protocols to deal 
with the phenomenon that, on execution of an instruction sequence, a stream 
of instructions to be processed arises at one place and the processing of that 
stream of instructions is handled at another place. The more complex protocol 
is directed towards keeping the execution unit busy. In this way, we have brought 
the phenomenon better into the picture and have ascribed a sense to the term 
instruction stream which makes clear that an instruction stream is dynamic by 
nature, in contradistinction with an instruction sequence. We have also discussed 
some conceivable adaptations of the more complex protocol. 

The description of the protocol starts from the behaviours produced by in- 
struction sequences under execution. By that we abstract from the instruction 
sequences which produce those behaviours. How instruction streams can be gen- 
erated efficiently from instruction sequences is a matter that obviously requires 
investigations at a less abstract level. The investigations in question are an option 
for future work. 

We believe that the more complex protocol described in this paper provides 
a setting in which basic techniques aimed at increasing processor performance, 
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such as pre-fetching and branch-prediction, can be studied at a more abstract 
level than usual (cf. [13]). In particular, we think that the protocol can serve 
as a starting-point for the development of a model with which trade-offs en- 
countered in the design of processor architectures can be clarified. We consider 
investigations into this matter an interesting option for future work. 

Because process algebras such as ACP, CCS and CSP are considered relevant 
to computer science, there must be programmed systems whose behaviours are 
taken for processes as considered in such a process algebra. In that light, we 
have investigated the connections between programs and the processes that they 
produce, starting from the perception of a program as an instruction sequence. 
We have shown that, by apposite choice of basic instructions, all regular processes 
can be produced by means of instruction sequences as considered in PGA. 

We have also made precise what processes are produced by instruction se- 
quences under execution that make use of services. The reason for this is that 
instruction sequences under execution are regular threads and regular threads 
that make use of services such as unbounded counters, unbounded stacks or Tur- 
ing tapes may produce non-regular processes. An option for future work is to 
characterize the classes of processes that can be produced by single-pass instruc- 
tion sequences that make use of such services. 
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